This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft File: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft (raw, json) Hash identifier: FhVTqX2DF27IuazzNBvgTh2dnlIE3TBAvbZtyxF89IA= Subject key identifier: C5:6B:5C:B1:9C:D7:5F:74:C9:71:BB:87:4F:41:BC:7E:AE:21:9E:00 Authority key identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF Certificate issuer: /CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff Certificate serial: 019AF5AE5CEEF1FC4701F918F64E2198FA16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft Manifest number: 083F Signing time: Sat 06 Dec 2025 22:00:36 +0000 Manifest this update: Sat 06 Dec 2025 22:00:36 +0000 Manifest next update: Sun 07 Dec 2025 22:00:36 +0000 Files and hashes: 1: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl (hash: Q7hwoCK+ZZ8zGBJqmw4/P/Yy1n8IxubGTHVmrJ4DVKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:5c:ee:f1:fc:47:01:f9:18:f6:4e:21:98:fa:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff Validity Not Before: Dec 6 22:00:36 2025 GMT Not After : Dec 7 22:00:36 2025 GMT Subject: CN=c56b5cb19cd75f74c971bb874f41bc7eae219e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7d:6d:60:5c:a6:11:ba:3a:f4:00:3e:3a:1e: 51:4f:85:a1:fa:6d:42:ad:e2:f0:62:b7:29:8a:1f: a8:a6:cd:8a:20:97:b0:bf:75:25:af:43:4d:35:6f: a6:8e:de:c4:e9:a0:42:64:a3:0d:10:bb:45:ec:12: b5:c9:9a:87:f7:fc:3d:c9:d8:1b:97:18:e6:8c:93: 0b:fc:d8:e9:da:dd:fe:03:33:ea:b6:54:40:2f:ce: 75:d0:83:75:3f:f6:f2:67:7c:fb:7f:e9:e4:dc:53: 3a:f0:6b:df:04:02:90:76:07:36:f9:c9:86:b4:12: 69:e8:7a:da:2d:36:79:32:e3:1d:45:cc:d5:81:b2: 5a:a3:26:7c:f9:e8:d5:64:0c:22:c7:30:13:c8:ca: 19:e4:8c:21:f9:fc:b2:35:cc:39:ed:e5:7b:8e:02: 64:99:8b:18:fe:f5:60:b3:16:ac:cd:d9:ea:00:95: 41:ad:f3:67:df:75:03:27:fd:78:e0:a6:15:e8:d9: 07:f1:45:a5:9d:de:13:70:6b:d3:7a:43:95:2f:ef: 41:6f:ec:00:a1:fb:98:85:db:90:ac:f4:a4:e8:86: d4:25:92:43:7d:5d:2e:c1:30:e7:a5:f0:bf:6d:75: f5:9b:75:46:98:24:2a:f1:bf:92:37:c5:59:fa:28: 7f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6B:5C:B1:9C:D7:5F:74:C9:71:BB:87:4F:41:BC:7E:AE:21:9E:00 X509v3 Authority Key Identifier: keyid:F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9b:4b:06:3e:bf:3c:27:89:2a:b7:b8:29:6b:01:9d:5a:20: ea:82:8a:aa:50:3c:c2:ea:ac:bc:0f:21:d3:5d:f1:02:e3:87: 4b:bf:0b:b2:7d:fb:09:bc:8d:d6:47:86:9a:5f:c3:70:a7:8f: fa:5a:de:ff:2f:8a:c8:ad:26:09:6e:b7:4e:54:68:ee:b5:cc: af:61:c0:7b:cd:15:2a:05:9b:2e:28:af:00:76:93:e4:d5:84: fe:1e:25:23:d5:a8:16:7c:2e:02:6e:a7:17:6b:26:f2:90:e7: 77:84:80:65:81:a1:bb:77:a7:e7:2f:b4:7a:4e:c0:26:80:4e: 8e:e3:0e:b6:71:82:94:87:f7:c2:d4:1e:d8:fa:99:c5:e7:85: 7e:7b:8a:93:b3:1b:a6:a1:74:54:8f:3d:fb:d9:2c:52:92:fe: 51:49:7d:95:8d:05:a3:25:be:93:6f:d4:8a:59:67:bb:0a:6c: 2b:98:4c:5b:38:f0:a1:cc:b1:11:6d:5c:44:51:32:9d:f3:1a: e2:dc:7e:cd:47:37:6c:f9:ee:04:c4:f7:b0:a8:11:58:2f:78: f5:26:90:a6:31:21:a7:a9:57:9b:8d:55:f5:e4:60:d7:10:a1: 15:ff:bb:c0:ec:e2:b5:d8:8b:ec:a5:cb:85:3d:f2:ce:6d:c7: 61:4e:f3:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rlzu8fxHAfkY9k4hmPoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwOGMxOTY0ODQ3MDA5MWZjYTdjMGVkNzljZTlkZjZiZGFh MGNkZmYwHhcNMjUxMjA2MjIwMDM2WhcNMjUxMjA3MjIwMDM2WjAzMTEwLwYDVQQD EyhjNTZiNWNiMTljZDc1Zjc0Yzk3MWJiODc0ZjQxYmM3ZWFlMjE5ZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA031tYFymEbo69AA+Oh5RT4Wh+m1C reLwYrcpih+ops2KIJewv3Ulr0NNNW+mjt7E6aBCZKMNELtF7BK1yZqH9/w9ydgb lxjmjJML/Njp2t3+AzPqtlRAL8510IN1P/byZ3z7f+nk3FM68GvfBAKQdgc2+cmG tBJp6HraLTZ5MuMdRczVgbJaoyZ8+ejVZAwixzATyMoZ5Iwh+fyyNcw57eV7jgJk mYsY/vVgsxaszdnqAJVBrfNn33UDJ/144KYV6NkH8UWlnd4TcGvTekOVL+9Bb+wA ofuYhduQrPSk6IbUJZJDfV0uwTDnpfC/bXX1m3VGmCQq8b+SN8VZ+ih/kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVrXLGc1190yXG7h09BvH6uIZ4AMB8GA1UdIwQY MBaAFPCMGWSEcAkfynwO15zp32vaoM3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEl3WlpJUndDUl9LZkE3WG5PbmZhOXFnemY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNTQ4NWUtMzgyNi00M2U4LThiZTIt ZDFmZThjYjAxNDU2LzEvOEl3WlpJUndDUl9LZkE3WG5PbmZhOXFnemY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9jNTQ4NWUtMzgyNi00M2U4LThiZTItZDFmZThjYjAxNDU2 LzEvOEl3WlpJUndDUl9LZkE3WG5PbmZhOXFnemY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJtLBj6/ PCeJKre4KWsBnVog6oKKqlA8wuqsvA8h013xAuOHS78Lsn37CbyN1keGml/DcKeP +lre/y+KyK0mCW63TlRo7rXMr2HAe80VKgWbLiivAHaT5NWE/h4lI9WoFnwuAm6n F2sm8pDnd4SAZYGhu3en5y+0ek7AJoBOjuMOtnGClIf3wtQe2PqZxeeFfnuKk7Mb pqF0VI89+9ksUpL+UUl9lY0FoyW+k2/UillnuwpsK5hMWzjwocyxEW1cRFEynfMa 4tx+zUc3bPnuBMT3sKgRWC949SaQpjEhp6lXm41V9eRg1xChFf+7wOzitdiL7KXL hT3yzm3HYU7zcg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:52:04 2025 by rpki-client